home

magic_uneraser_it.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.softonic.it and multiple other hosts.
MD5:
f1ecae395f9c3244fec5501e3cf19ea4

SHA-1:
ad9ea10c7fb4dbd19ebb1c4c6b8a453f8a0a6b7c

SHA-256:
84bd8858f4d7a1e153025d262e1d005f3179dc18a8dbb9d5345a7723a874da96

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/5/2025 6:18:48 AM UTC  (today)

File size:
13.2 MB (13,882,707 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\magic_uneraser_it.exe

File PE Metadata
Compilation timestamp:
2/24/2012 8:19:54 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:7lgvrHE99VpMXblRQjFH26qK1qS8wYQVoJt4g:5OW9VCbLg86j8wxA4g

Entry address:
0x3883

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, 92, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, 92, 40, 00, FF, 15, 84, 81, 40, 00, 68, 4C, 92, 40, 00, 68, C0, AD, 46, 00, E8, 18, 27, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
27.5 KB (28,160 bytes)

The file magic_uneraser_it.exe has been seen being distributed by the following 7 URLs.

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=522052e49c688e5a47dd4d91a1d76f81&upv=81720cbf789abbf9db33a8ee2b7c438c&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA723497DC91E127F8A5FAAC829BB59DB113BADE95D3FB9D0678A09186FF666E8DF66BE97B7A9E4A52ACBDB21EB6277E63E311B5F4577F0B904680A08209A45CAABA5C730AE739B508F8DB6E37C70EF1E076EE5FAC737A4B740D0C37011C008893DA4F7C005A866EAC514E05098FC7DD4C886783DCFB07356DFE46A6604A7F9D5193A18169DDF533B98E51E27BEBD3FB9E&h=172CE82006D6B540003C1B524A6B6D80328CCD18E6FF6EBD2AC45052A6F0992E&directdownload=1&f=318618&d=http://www.magicuneraser.com/.../Magic_Uneraser_It.exe

http://it.softonic.com/sads/tracker.php?ev=c&co=IT&sid=a9249ff76dfc97062f489e15751d7456&upv=1ee7e228c73e1540b80d75eedf5b05a8&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA723497DC91E127F8A5FAAC829BB59DB113BADE95D3FB9D0678A09186FF666E8D507253A4F7D345F773CCA3CB0C5055ADB904F2970FE1FD2423A2D78BBED9F9627E655D5991CCBBE805191E990895BAEDE0EBFAA8A88597F53F7B1C033E188447C3A40F13BBDF5DC22FD560490D8F6F466F5940C40C40CDAF66BCC010150C30B5440924098A9FDE47ED6F6ED13E4C1A3E&h=EF995B93AA5DADCECA540EA25B8A8798E14165C5A21EA28693A73574A585CE71&directdownload=1&f=318618&d=http://www.magicuneraser.com/.../Magic_Uneraser_It.exe

http://it.softonic.com/sads/tracker.php?ev=c&co=IT&sid=5fa9bb53ce0d7d887c8380f1a10ecb97&upv=a515e544d0fa25a89535af6cec0b0cdd&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA723497DC91E127F8A5FAAC829BB59DB113BADE95D3FB9D0678A09186FF666E8DE91FCA36E924AE17301276CF9C387D49EE52035B9CA722CE20ECB40A4E4517FBFE0A789F23C149E41040B3437F026D22DC5FD1767176FD461DDB015F55755D34E94F997A73BEA24C7EB91E4CF98C85AA2B317D180CEB2D4724B5D5E015A8185F007628F307AAB452034FCAB0C8728583&h=B2882D8FCECE89C04CC31D23AD4A43BB4F9175D2E7DF3BF70881CCDCE6677ACD&directdownload=1&f=318618&d=http://www.magicuneraser.com/.../Magic_Uneraser_It.exe

http://it.softonic.com/sads/tracker.php?ev=c&co=IT&sid=e3150f6b5b4b27c7daa5b10c94dc2a60&upv=cfdc863ca345ee6d63463ca842da748f&z=results&sk=0&abp=1&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA723497DC91E127F8A5FAAC829BB59DB113BADE95D3FB9D0678A09186FF666E8D8893E6F421A6F97A89A512C497C1BCB1B68E40F5AC2FF9EFCC9C21F9ED1FA3DAE209E2A8D0F99D57BDD11D2D7C76D04C9F8E2DF8D5811B8D9C49AD545DEAF6339894A34E944F8C1C54AD7EE74EF66CA64862A5D4B3E8AF8E45367C7B538FD6E5F6452F106633A06FAFBF9184F1170C7F&h=5C88F6E24B3F5DF5179E9C2788F6E8E349EB0B99DA6B5FE84EA413F35BF27B1B&directdownload=1&f=318618&d=http://www.magicuneraser.com/.../Magic_Uneraser_It.exe

http://magicuneraser.com/.../Magic_Uneraser_It.exe

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=afa7fadd73a00f47d1ba7d3a067a4515&upv=be6d7ce68a65b3252753fc22286ed629&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA723497DC91E127F8A5FAAC829BB59DB113BADE95D3FB9D0678A09186FF666E8DCBCD4F1043A7C1109B684A779F5139D7AA974209DF2F0DB8E4217DFD69F69C01B8C5B533C0C2EC1BCCAA282E1845C9E2C5125C11E7EDB33364EEBA671FDE6EBCB2A6DF9F136305DDA01497B98F1590D879DA2DC334D43C33A856AC4E1748720400EC02FC10CFAD5D7931FDB026800537&h=8C75749111191C37BB280BD8020D593E03BA144201E26ACF66D9618F3FDA6582&directdownload=1&f=318618&d=http://www.magicuneraser.com/.../Magic_Uneraser_It.exe

http://www.magicuneraser.com/.../Magic_Uneraser_It.exe

Scan magic_uneraser_it.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.